Managed Security Services (MSS) Cybersecurity Analyst at Ethnos Cyber Limited

Job Description

• We are seeking a Cybersecurity Analyst to join our Managed Security Services (MSS) team. The successful candidate will play a key role in monitoring security environments, investigating alerts, responding to security incidents, supporting VAPT activities, and ensuring that assigned security tasks are completed accurately and within defined SLA timelines.
• This role is ideal for a cybersecurity professional who is analytical, detail-oriented, responsive, and passionate about detecting and responding to cybersecurity threats.

Responsibilities:

• Execute comprehensive penetration tests across Web (APIs, REST, GraphQL), Mobile (iOS & Android), Network infrastructure, and Cloud environments (AWS, Azure, GCP).
• Identify and exploit business logic flaws, OWASP Top 10 vulnerabilities, API security risks, network misconfigurations, and cloud IAM permission gaps.
• Conduct reverse engineering, static/dynamic analysis, and security assessments on iOS and Android mobile binaries.
• Simulate adversary tactics, techniques, and procedures (TTPs) to assess security posture and defensive coverage.
• Produce detailed technical reports with proof-of-concept exploits, risk ratings, and actionable remediation steps for technical and non-technical stakeholders.
• Assist the Security Operations Center (SOC) with real-time threat monitoring, alert analysis, threat hunting, and SIEM rule tuning.
• Conduct digital forensic investigations into security incidents, analyzing disk images, memory dumps, system artifacts, and network logs to establish root cause and attack timelines.
• Support incident response teams during active breaches by analyzing attack vectors and containing security threats.
• Collaborate with software developers, DevOps, and system administrators to validate security patches and ensure effective vulnerability remediation.
• Mentor junior analysts and security engineers in offensive security practices, incident analysis, and threat detection techniques.

Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
• 2-4 years of relevant experience in cybersecurity, security monitoring, incident response, VAPT, or a related role.
• Practical experience in analyzing security alerts and investigating cybersecurity incidents.
• Working knowledge of VAPT processes and security testing methodologies.
• Experience with SIEM, security monitoring, incident management, or ticketing tools.
• Good understanding of network security, endpoint security, vulnerabilities, and common cyberattack techniques.
• Ability to produce clear, accurate, and well-structured technical reports.
• Strong understanding of incident response procedures and security escalation processes.
• Ability to work effectively within established security playbooks and operational procedures.